PT-2025-50772 · Librechat · Librechat

Published 2025-12-11 · Updated 2025-12-15 · CVE-2025-66451

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions LibreChat versions 0.8.0 and below

Description LibreChat, a ChatGPT clone, has an issue where input validation is insufficient when creating prompts. JSON requests sent to the /api/prompts/groups/:groupId endpoint via the PATCH method are not properly validated. This allows users to modify prompts in unintended ways due to the patchPromptGroup function passing the request body (req.body) directly to the updatePromptGroup function without filtering sensitive fields.

Recommendations LibreChat versions prior to 0.8.1 should be updated to version 0.8.1 or later.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

CWE-915

Related Identifiers

CVE-2025-66451

GHSA-VPQQ-5QR4-655H

Affected Products

Librechat

References · 7

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/66xxx/CVE-2025-66451.json · Exploit
• https://github.com/danny-avila/LibreChat/commit/01413eea3d3c1454d32ca9704fa9640407839737 · Patch
• https://github.com/danny-avila/LibreChat/security/advisories/GHSA-vpqq-5qr4-655h · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-66451 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-66451 · Security Note
• https://t.me/cveNotify/145788 · Telegram Post
• https://t.me/CVEtracker/39551 · Telegram Post